Vulnerability Details CVE-2025-64124
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): before 2.5.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.9%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2025-64124
-
cpe:2.3:a:nuvationenergy:nplatform:*
-
cpe:2.3:h:nuvationenergy:nuvmsc3-04s-c:-
-
cpe:2.3:h:nuvationenergy:nuvmsc3-08s-c:-
-
cpe:2.3:h:nuvationenergy:nuvmsc3-12s-c:-
-
cpe:2.3:h:nuvationenergy:nuvmsc3-16s-c:-